Record of changes to user account?

[Esther_Strom]

I’m one of three admins for our Duo install. I went in today to add a new user, and noticed that one user is set to Bypass. I didn’t make this change, and the other two admins say they didn’t, either.

Is there any accessible record of changes that are made to user accounts? I can look at the user logs and see the first time this user is marked as having bypassed Duo, but I’m trying to find out who made the change to his access and when.

[jamieis · Accepted solution]

Hey there @Esther_Strom,

You can see which administrator put a user into bypass mode by:

1. Logging into the Duo Admin Panel
2. Clicking the Reports navigation link on the left-hand side
3. New options will appear under Reports. Click Administrator Actions.
4. On the Administrator Actions page you will see each action an administrator has made. Changing someone into bypass would be considered a Modified User action. Under Actions you can click on the action to drill into details
   
5. This will show you the change to the user that happened
   

Let me know if you have any other questions!

[Esther_Strom]

Thank you! That’s exactly what I needed.